Hackers Overheated French Supermarket Freezers, Causing Food Loss and Fires
Attackers remotely raised temperatures to 50C in French stores, spoiling stock and melting equipment after exploiting unsupported devices.
Key points
- Attackers raised freezer temperatures to 50 degrees Celsius in French supermarkets.
- The incident caused tonnes of food loss, melted equipment, and store fires.
- The attack targeted aging devices that lacked manufacturer support.
Hackers remotely manipulated internet-connected refrigeration systems in hundreds of French supermarkets overnight, causing significant physical damage and food loss. Retailers confirmed on Monday that attackers pushed fridge and freezer temperatures as high as 50 degrees Celsius while stores were closed for business operations.
According to The Cyber Express, the incident resulted in tonnes of perished food, melted equipment, and fires sparked by excessive heat in some locations. French TV channel BFM reported that attackers appeared to trigger a forced defrost option, keeping units heating instead of cooling.
Attack Methodology and Context
The attack did not utilize a new exploit or zero-day vulnerability. Instead, it targeted aging connected devices that remained online years after their manufacturer stopped supporting them. This reliance on end-of-life hardware left the systems vulnerable to remote manipulation without the need for sophisticated new code.
The incident highlights the risks of maintaining legacy IoT devices in critical infrastructure. The attackers leveraged existing functionalities, such as defrost cycles, to cause physical harm rather than stealing data. This approach caused direct operational disruption and financial loss through spoiled inventory and damaged property.
Affected Retailers and Impact
Major French retailers including E.Leclerc, Intermarché, and Carrefour were among those affected by the widespread attack. The simultaneous compromise of hundreds of locations suggests a coordinated effort targeting a specific class of vulnerable refrigeration equipment. The physical consequences extended beyond data theft, impacting supply chains and store safety.
The Cyber Express noted that the incidents reached well beyond stolen data, causing disrupted grocery deliveries and drained bank accounts in other unrelated stories. However, the freezer attack specifically caused spoiled food and store fires, marking a distinct escalation in physical consequences for cyber intrusions.
What should you do?
Organizations should inventory all connected devices and verify their support status with manufacturers. Removing unsupported hardware from production networks reduces the attack surface for such manipulations. Monitoring for unusual temperature readings or device behavior can help detect anomalies early.
What to do and how to stay safe: E.Leclerc
- Audit your IoT device inventory to identify equipment that has reached end-of-life or lacks security updates.
- Isolate legacy refrigeration or HVAC systems from the main corporate network to limit remote access vectors.
- Implement monitoring alerts for abnormal operational parameters, such as unexpected temperature spikes or forced defrost cycles.
- Develop incident response procedures that address physical safety hazards, including fire risks, alongside digital containment.
Step-by-step guide: Social Engineering Warning Signs and How to Respond
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Did the hackers use a new vulnerability to breach the systems?
No, the attack did not use a new exploit; it targeted aging devices that were no longer supported by their manufacturer.
What physical damage occurred during the incident?
Tonnes of food perished, some equipment melted, and the excessive heat sparked fires in some stores.
Which retailers were reported to be affected?
E.Leclerc, Intermarché, and Carrefour were among the French supermarkets affected by the remote control of refrigeration systems.
